token-analyzer 0.0.1

Fast, parallel token security analyzer - Detect exposed secrets, API keys, and sensitive tokens in your codebase
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22

# ⚠️ DEMO FILE - Shows dangerous patterns
# This file demonstrates security anti-patterns

version: "3.8"

services:
  api:
    image: myapp:latest
    environment:
      # 🔴 BAD: Hardcoded secret value
      - API_KEY=hardcoded_secret_value_for_docker_compose
      # ✅ GOOD: Reference to environment variable
      - DATABASE_URL=${DATABASE_URL}
    ports:
      - "8080:8080"

  database:
    image: postgres:15
    environment:
      # 🔴 BAD: Another hardcoded secret
      - API_KEY=another_hardcoded_api_key_value_here
      - POSTGRES_PASSWORD=supersecretdbpassword